Check Point
TMA-CHECKPOINT-3.2
Configure a Default Drop/Cleanup Rule
VisokaNivo 2Ručni pregledcheckpoint
Opis
Ensure that the final rule in the rulebase explicitly drops all services, destinations, etc not specifically allowed in the previous rules. It is important that any access not explicitly allowed be explicitly dropped.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Verify the last rule is present in the rulebase which is denying all traffic from any source to any destination.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Create or edit the last rule in the rulebase which is denying all traffic from any source to any destination.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- checkpointfirewall-policy
- Referenca
- CIS Check Point Firewall Benchmark v1.1.0 - 3.2 Configure a Default Drop/Cleanup Rule